CVE Vulnerabilities

CVE-2022-36179

Insufficient Session Expiration

Published: Nov 22, 2022 | Modified: Apr 29, 2025
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM
root.io minimus.io echohq.com

Fusiondirectory 1.3 suffers from Improper Session Handling.

Weakness

According to WASC, “Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization.”

Affected Software

Name Vendor Start Version End Version
Fusiondirectory Fusiondirectory 1.3 (including) 1.3 (including)
Fusiondirectory Ubuntu bionic *
Fusiondirectory Ubuntu focal *
Fusiondirectory Ubuntu trusty *
Fusiondirectory Ubuntu xenial *

Potential Mitigations

References